Language Selection

English French German Italian Portuguese Spanish

Unpatched Firefox flaw may expose users

Filed under
Moz/FF
Security

A new, unpatched flaw in that affects all versions of Firefox could let attackers surreptitiously run malicious code on users' PCs, a security researcher has warned.

The problem lies in the way Firefox handles Web links that are overly long and contain dashes, security researcher Tom Ferris said in an interview via instant messaging late Thursday.

He posted an advisory and a proof of concept to the Full Disclosure security mailing list and to his Security Protocols Web site.

The security vulnerability is a buffer overflow flaw that "allows for an attacker to remotely execute arbitrary code" on a vulnerable PC, Ferris said. An attacker could host a Web site containing the malicious code to exploit the flaw, he said. Though his proof of concept only crashes Firefox, Ferris claims he has been able to tweak it to run code.

Severity:
Critical

Vendor:
Mozilla

Versions Affected:
Firefox Win32 1.0.6 and prior
Firefox Linux 1.0.6 and prior
Firefox 1.5 Beta 1 (Deer Park Alpha 2)

Full Story.

More in Tux Machines

Airdroid - Transfer Files Between Android Phones/Tablets And Linux (Any Distribution)

 
airdroid transfer file between android phone/tablet and linux mint ubuntu
We often need to transfer large amount data in the form of mp3 Songs, Video Songs, Movies and most importantly, large Games between android phones/tablets and Linux machine. Transferring via USB cable takes time, so let's do it with 'Airdroid' easily and quickly.
 
 
 
 

Read at LinuxAndUbuntu

If You Like the Terminal, You Will Love the Terminal-Only Alpine Linux OS

Security-oriented, lightweight Linux distribution Alpine Linux is based on based on musl libc and Busybox, which make up the terminal, has been upgraded once more and is now available for download. Read more

Android Wear just got very, very smart

Google's Android Wear software just got smart - very smart - simply because it integrates Google Now top to bottom. With an update to Google Now comes an update to Android Wear, and what we're seeing today is an explosive update that'll make the suggestions for directions and sports scores you've been getting so far seem like drops in a barrel of friendly, and I daresay helpful, updates from apps of all kinds. Everything from eBay auction updates to the ability to "Download Venice" - all on your wrist, very soon. Read more

Leftovers: Software